USER GUIDE

Wireless-G Broadband Router with 2 Phone Ports

Model No: WRP400

About This Guide

Icon Descriptions

While reading through the User Guide you may see various icons that call attention to specific items. Below is a description of these icons: NOTE: This check mark indicates that there is a note of interest and is something that you should pay special attention to while using the product.
WARNING: This exclamation point indicates that there is a caution or warning and it is something that could damage your property or product.
WEB: This globe icon indicates a noteworthy website address or e-mail address.

Online Resources

Website addresses in this document are listed without http:// in front of the address because most current web browsers do not require it. If you use an older web browser, you may have to add http:// in front of the web address. Resource Linksys Linksys International Glossary Network Security Website www.linksys.com www.linksys.com/international www.linksys.com/glossary www.linksys.com/security

Copyright and Trademarks

Linksys is a registered trademark or trademark of Cisco Systems, Inc. and/ or its affiliates in the U.S. and certain other countries. Copyright 2007 Cisco Systems, Inc. All rights reserved. Other brands and product names are trademarks or registered trademarks of their respective holders.

Table of Contents

Chapter 1: Product Overview 4
Front Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Back Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Side Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Placement Positions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Chapter 2: Wireless Security Checklist
General Network Security Guidelines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Additional Security Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Chapter 3: Advanced Configuration
Setup > Basic Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Setup > DDNS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Setup > MAC Address Clone. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Setup > Advanced Routing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Wireless > Basic Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Wireless > Wireless Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Wireless > Wireless MAC Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Wireless > Advanced Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Security > Firewall. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Security > VPN Passthrough . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Access Restrictions > Internet Access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Applications and Gaming > Single Port Forwarding. . . . . . . . . . . . . . . . . . . . . . . 20 Applications and Gaming > Port Range Forward. . . . . . . . . . . . . . . . . . . . . . . . . 21 Applications & Gaming > Port Range Triggering.22 Applications and Gaming > DMZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Applications and Gaming > QoS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Administration > Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Administration > Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Administration > Diagnostics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Administration > Factory Defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 Administration > Firmware Upgrade. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Administration > Config Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Status > Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Status > Local Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Status > Wireless Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Access to the Voice Screens. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Voice > Info. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Voice > System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Voice > User 1/2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Voice > Admin Login. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Chapter 4: Interactive Voice Response Menu 34
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Menu Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Appendix A: Troubleshooting Appendix B: Specifications Appendix C: Warranty Information Appendix D: Regulatory Information
FCC Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 FCC Radiation Exposure Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Safety Notices and Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Industry Canada Statement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Avis dIndustrie Canada. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Wireless Disclaimer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Avis de non-responsabilit concernant les appareils sans fil . . . . . . . . . . . . . . . . . . 41 Telepermit Statement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 Declaration of Conformity with Regard to EU Directive 1999/5/EC (R&TTE Directive) . . 42 CE Marking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 National Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Product Usage Restrictions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Technical Documents on www.linksys.com/international. . . . . . . . . . . . . . . . . . . . 44 User Information for Consumer Products Covered by EU Directive 2002/96/EC on Waste Electric and Electronic Equipment (WEEE) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Chapter 1

Product Overview
Wireless (Green) The Wireless LED lights up when the wireless feature is enabled. It flashes when the Router is actively sending or receiving data over the network. Ethernet 1-4 (Green) These numbered LEDs, corresponding with the numbered ports on the Routers back panel, serve two purposes. If the LED is solidly lit, the Router is connected to a device through that port. It flashes to indicate network activity over that port. Internet (Green) The Internet LED lights up and stays on when there is a connection made through the Internet port. It flashes to indicate network activity over the Internet port.

Chapter 1: Product Overview
Thank you for choosing the Linksys Wireless-G Broadband Router with 2 Phone Ports. The Router lets you access the Internet via a wireless connection or through one of its four switched ports. You can also use the Router to share resources such as computers, printers and files. The builtin phone adapter enables Voice-over-IP (VoIP) calls even while you are using the Internet.

Front Panel

Back Panel
USB The USB port is reserved for future use. Wi-Fi Protected Setup (White/Orange) If you have client devices, such as wireless adapters, that support Wi-Fi Protected Setup, then you can use Wi-Fi Protected Setup to automatically configure wireless security for your wireless network(s). To use Wi-Fi Protected Setup, refer to your wireless adapters documentation. The Wi-Fi Protected Setup button lights up white and stays on while wireless security is enabled on your wireless network(s). The button flashes orange if there is an error during the WiFi Protected Setup process. Make sure the client device supports Wi-Fi Protected Setup, and then try again. Power (Green/Red) The Power LED lights up green and stays on while the Router is powered on. When the Router goes through its selfdiagnostic mode during every boot-up, the LED will flash. When the diagnostic is complete, it will be solidly lit green. If the LED lights up red, make sure the correct power adapter is used. If the LED remains red, contact your Internet Service Provider (ISP) or Internet Telephony Service Provider (ITSP) for support. Phone 1-2 (Green) The Phone 1 or 2 LED lights up and stays on when an active line is registered to the corresponding port on the Routers back panel. The LED slowly flashes when voicemail messages are waiting.
Internet The Internet port is where you will connect your cable or DSL Internet connection. Phone 1-2 The Phone ports connect standard analog telephones to the Router. Ethernet 1, 2, 3, 4 These Ethernet ports (1, 2, 3, 4) connect the Router to wired computers and other Ethernet network devices. Power The Power port is where you will connect the power adapter.

Vertical Placement

The Router has a stand on the panel opposite to the antenna. Rotate the stand 90 degrees, and place the Router on a level surface near an electrical outlet.

Side Panel

Reset There are two ways to reset the Routers factory defaults. Either press and hold the Reset button for approximately ten seconds, or restore the defaults from the Administration>Factory Defaults screen of the Routers web-based utility. (The Factory Defaults screen allows you to restore the Router and voice defaults separately.) NOTE: Restoring the voice defaults may require your login (the default user name and password are admin). If the defaults do not work, contact your ITSP for more information. Stand To place the Router in a vertical position, rotate the stand 90 degrees.

Internet Connection Type > PPPoE
User Name and Password Enter the User Name and Password provided by your ISP. Service Name (Optional) If provided by your ISP, enter the Service Name. Connect on Demand: Max Idle Time You can configure the Router to cut the Internet connection after it has been inactive for a specified period of time (Max Idle Time). If your Internet connection has been terminated due to inactivity, Connect on Demand enables the Router to automatically re-establish your connection as soon as you attempt to access the Internet again. To use this option, select Connect on Demand. In the Max Idle Time field, enter the number of minutes you want to have elapsed before your Internet connection terminates. The default Max Idle Time is 5 minutes.
your Internet connection has been terminated due to inactivity, Connect on Demand enables the Router to automatically re-establish your connection as soon as you attempt to access the Internet again. To use this option, select Connect on Demand. In the Max Idle Time field, enter the number of minutes you want to have elapsed before your Internet connection terminates. The default Max Idle Time is 5 minutes. Keep Alive: Redial Period If you select this option, the Router will periodically check your Internet connection. If you are disconnected, then the Router will automatically re-establish your connection. To use this option, select Keep Alive. In the Redial Period field, you specify how often you want the Router to check the Internet connection. The default Redial Period is 30 seconds.
L2TP is a service that applies to connections in Europe and Israel.
Internet Connection Type > L2TP
Server IP Address This is the IP address of the L2TP Server. Enter the IP address provided by your ISP. User Name and Password Enter the User Name and Password provided by your ISP. Connect on Demand: Max Idle Time You can configure the Router to cut the Internet connection after it has been inactive for a specified period of time (Max Idle Time). If your Internet connection has been terminated due to inactivity, Connect on Demand enables the Router to automatically re-establish your connection as soon as you attempt to access the Internet again. To use this option, select Connect on Demand. In the Max Idle Time field, enter the number of minutes you want to have elapsed before your Internet connection terminates. The default Max Idle Time is 5 minutes. Keep Alive: Redial Period If you select this option, the Router will periodically check your Internet connection. If you are disconnected, then the Router will automatically re-establish your connection. To use this option, select Keep Alive. In the Redial Period field, you specify how often you want the Router to check the Internet connection. The default Redial Period is 30 seconds.

Optional Settings

Some of these settings may be required by your ISP. Verify with your ISP before making any changes.

VPN Passthrough

IPSec Passthrough Internet Protocol Security (IPSec) is a suite of protocols used to implement secure exchange of packets at the IP layer. To allow IPSec tunnels to pass through the Router, keep the default, Enabled. PPTP Passthrough Point-to-Point Tunneling Protocol (PPTP) allows the Point-to-Point Protocol (PPP) to be tunneled through an IP network. To allow PPTP tunnels to pass through the Router, keep the default, Enabled. L2TP Passthrough Layer 2 Tunneling Protocol is the method used to enable Point-to-Point sessions via the Internet on the Layer 2 level. To allow L2TP tunnels to pass through the Router, keep the default, Enabled. Click Save Settings to apply your changes, or click Cancel Changes to cancel your changes.

Internet Access Policy

Access Policy Access can be managed by a policy. Use the settings on this screen to establish an access policy (after Save Settings is clicked). Selecting a policy from the dropdown menu will display that policys settings. To delete a policy, select that policys number and click Delete This Policy. To view all the policies, click Summary.

Summary

The policies are listed with the following information: No., Policy Name, Access, Days, Time of Day, and status (Enabled). To enable a policy, select Enabled. To delete a policy, click Delete. Click Save Settings to save your changes, or click Cancel Changes to cancel your changes. To return to the Internet Access Policy screen, click Close.
Access Restrictions > Internet Access
The Internet Access screen allows you to block or allow specific kinds of Internet usage and traffic, such as Internet access, designated services, and websites during specific days and times.
6. Decide which days and what times you want this policy to be enforced. Select the individual days during which the policy will be in effect, or select Everyday. Then enter a range of hours and minutes during which the policy will be in effect, or select 24 Hours. 7. You can block websites with specific URL addresses. Enter each URL in a separate URL field. 8. You can also block websites using specific keywords. Enter each keyword in a separate Keyword field. 9. You can filter access to various services accessed over the Internet, such as FTP or telnet. (You can block up to three applications per policy.) From the Applications list, select the application you want to block. Then click the >> button to move it to the Blocked List. To remove an application from the Blocked List, select it and click the << button. 10. If the application you want to block is not listed or you want to edit a services settings, enter the applications name in the Application Name field. Enter its range in the Port Range fields. Select its protocol from the Protocol drop-down menu. Then click Add. To modify a service, select it from the Application list. Change its name, port range, and/or protocol setting. Then click Modify. To delete a service, select it from the Application list. Then click Delete. 11. Click Save Settings to save the policys settings. To cancel the policys settings, click Cancel Changes.

Web Access

Web Utility Access HTTP (HyperText Transport Protocol) is the communications protocol used to connect to servers on the World Wide Web. HTTPS uses SSL (Secured Socket Layer) to encrypt data transmitted for higher security. Select HTTP or HTTPS. HTTP is the default. Web Utility Access via Wireless If you are using the Router in a public domain where you are giving wireless access to your guests, you can disable wireless access to the Routers web-based utility. You will only be able to access the utility via a wired connection if you disable the setting. Keep the default, Enabled, to allow wireless access to the utility, or select Disabled to block wireless access to the utility.

Multimedia Streaming

RTSP Support If you are experience issues with videoon-demand applications, select Enabled to improve multimedia transmissions. Using this option, the Router will establish channels with the Real Time Streaming

Remote Access

Remote Management To permit remote access of the Router, from outside the local network, select Enabled. Otherwise, keep the default, Disabled.
Protocol) RTSP server, which is located at the ISP. Otherwise, keep the default, Disabled.
Internet Group Multicast Protocol (IGMP) is used to establish membership in a multicast group and is commonly used for multicast streaming applications. For example, you may have Internet Protocol Television (IPTV) with multiple setup boxes on the same local network. These setup boxes have different video streams running simultaneously, so you should use the IGMP feature of the Router. Support IGMP Version Select the version you want to support, IGMP v1, IGMP v2, or IGMP v3. If you are not sure which version to select, keep the default, IGMP v2. IGMP Proxy Keep the default, Enabled, if you want to allow multicast traffic through the Router for your multimedia application devices. Otherwise, select Disabled. Immediate Leave Select Enabled, if you use IPTV applications and want to allow immediate channel swapping or flipping without lag or delays. Otherwise, keep the default, Disabled. Click Save Settings to apply your changes, or click Cancel Changes to cancel your changes.

Product Name The model number of the Router is displayed. Serial Number The serial number of the Router is displayed. Software Version The version number of the Router software is displayed.
Last Called Number The last number called is displayed. Last Caller Number The number of the last caller is displayed. Mapped SIP Port The port number of the NAT mapped SIP port is displayed. Calls 1 and 2 have the same status information available. Call 1/2 State The status of the call is displayed. Call 1/2 Tone The type of tone used by the call is displayed. Call 1/2 Encoder The codec used for encoding is displayed. Call 1/2 Decoder The codec used for decoding is displayed. Call 1/2 FAX The status of the fax pass-through mode is displayed. Call 1/2 Type The direction of the call is displayed. Call 1/2 Remote Hold This indicates whether the far end has placed the call on hold. Call 1/2 Callback This indicates whether the call was triggered by a call back request. Call 1/2 Peer Name The name of the internal phone is displayed. Call 1/2 Peer Phone The phone number of the internal phone is displayed. Call 1/2 Duration The duration of the call is displayed. Call 1/2 Packets Sent The number of packets sent is displayed. Call 1/2 Packets Recv The number of packets received is displayed. Call 1/2 Bytes Sent The number of bytes sent is displayed. Call 1/2 Bytes Recv The number of bytes received is displayed. Call 1/2 Decode Latency The number of milliseconds for decoder latency is displayed. Call 1/2 Jitter The number of milliseconds for receiver jitter is displayed. Call 1/2 Round Trip Delay The number of milliseconds for delay is displayed. Call 1/2 Packets Lost The number of packets lost is displayed. Call 1/2 Packet Error The number of invalid packets received is displayed. Call 1/2 Mapped RTP Port The number of the NAT mapped RTP port is displayed.
Hardware Version The version number of the Router hardware is displayed. MAC Address The MAC address of the Router is displayed. Client Certificate The status of the client certificate, which indicates that the Router has been authorized by your ITSP, is displayed.

System Status

Current Time The current date and time of the Router are displayed. Elapsed Time The amount of time elapsed since the last reboot of the Router is displayed. RTP Packets Sent The number of RTP packets sent by the Router is displayed. RTP Bytes Sent The number of RTP bytes sent by the Router is displayed. RTP Packets Recv The number of RTP packets received by the Router is displayed. RTP Bytes Recv The number of RTP bytes received by the Router is displayed. SIP Messages Sent The number of SIP messages sent by the Router is displayed. SIP Bytes Sent The number of SIP bytes sent by the Router is displayed. SIP Messages Recv The number of SIP messages received by the Router is displayed. SIP Bytes Recv The number of SIP bytes received by the Router is displayed. External IP The external IP address used for NAT mapping is displayed.

Line 1/2 Status

Lines 1 and 2 have the same status information available. Hook State The status of the Internet phone lines readiness is displayed. On indicates that it is ready for use, while Off indicates that it is in use. Registration State The status of the lines registration with the ITSP is displayed. Last Registration At The last date and time the line was registered are displayed. Next Registration In The number of seconds until the next registration is displayed. Message Waiting This indicates whether you have new voicemail waiting. Call Back Active This indicates whether a call back request is in progress.
Call 1/2 Media Loopback The Media Loopback feature allows the ITSP to test the quality of the connection to the Router. The status of the feature is displayed.

Voice > System

The System screen displays the User Password setting.

System Configuration

User Password Enter the password for user access to the Voice screens. (By default, there is no password.)

Miscellaneous Settings

No settings are displayed. Click Save Settings to apply your change, or click Cancel Changes to cancel your change.

Voice > User 1

Call Forward Settings
Enter the call forwarding numbers you want to use. Cfwd All Dest Enter the number for the Call Forward All Service feature (when you want to forward all calls). Cfwd Busy Dest Enter the number for the Call Forward Busy feature (when the line is busy). Cfwd No Ans Dest Enter the number for the Call Forward No Answer feature (when the line is not answered). Cfwd No Ans Delay Enter the number of seconds to wait before the Call Forward No Answer feature is triggered. The default is 20.

Voice > User 1/2

The User 1 and 2 screens display similar settings. The User 1 screen displays settings for users of phone line 1, and the User 2 screen displays settings for users of phone line 2.
Selective Call Forward Settings
Enter the caller numbers that will be forwarded to specific phone numbers. Cfwd Sel1-8 Caller Enter the caller number pattern to trigger the Call Forward Selective (1-8) feature. Cfwd Sel1-8 Dest Enter the forward number for the Call Forward Selective (1-8) feature. Cfwd Last Caller Enter the caller number that is actively forwarded to the Cfwd Last Dest number when the Call Forward Last activation code is used. Cfwd Last Dest Enter the forward number for the Cfwd Last Caller feature.
Wireless-G Broadband Router with 2 Phone Ports 32
VMWI Ring Splash Len Enter the duration of the ring splash when new messages arrive before the VoiceMail Waiting Indication (VMWI) signal is applied. The range is 0 to 10.0 seconds. The default is 0. Click Save Settings to apply your changes, or click Cancel Changes to cancel your changes.

Block Last Caller Enter the ID of the caller blocked via the Block Last Caller service. Accept Last Caller Enter the ID of the caller accepted via the Accept Last Caller service.

Speed Dial Settings

Speed Dial 2-9 Enter the phone number for each Speed Dial setting.

Voice > Admin Login

The Admin Login allows access to more advanced settings. To access administrative screens, click Admin Login, and enter the user name and password provided by your ITSP. Contact your ITSP for more information. (The factory default Admin Login name and password are admin.) NOTE: In most cases, you do not need to use the administrative screens. Contact your ITSP for more information.
Supplementary Service Settings
CW Setting Select whether you want to use the Call Waiting feature for all calls, yes or no. The default is yes. Block CID Setting Select whether you want to block Caller ID for all calls, yes or no. The default is no. Block ANC Setting Select whether you want to block anonymous calls, yes or no. The default is no. DND Setting Select whether you want to use the Do Not Disturb (DND) feature, yes or no. The default is no. CID Setting Select whether you want to enable Caller ID generation, yes or no. The default is yes. CWCID Setting Select whether you want to enable Caller ID for Call Waiting, yes or no. The default is yes. Dist Ring Setting Select whether you want to use the Distinctive Ring feature, yes or no. The default is yes. Message Waiting Select whether you want to use the Message Waiting feature, yes or no. The default is no.
Distinctive Ring Settings
Ring1-8 Caller Enter the caller number pattern to play Distinctive Ring/Call Waiting Tone (1-8).

Ring Settings

Default Ring Select the default ringing pattern for all callers. The default is 1. Default CWT Select the default CWT pattern for all callers. The default is 1. Hold Reminder Ring Select the ring pattern that will remind you of a call on hold when the phone is on-hook. The default is 8. Call Back Ring Select the ring pattern for call back notification. The default is 7. Cfwd Ring Splash Len Enter the duration of the ring splash when a call is forwarded. The range is 0 to 10.0 seconds. The default is 0. Cblk Ring Splash Len Enter the duration of the ring splash when a call is blocked. The range is 0 to 10.0 seconds. The default is 0.

Verify your account information and confirm that the phone line is registered with your Internet Telephony Service Provider (ITSP).
When you double-click the web browser, you are prompted for a username and password. If you want to get rid of the prompt, follow these instructions. Launch the web browser and perform the following steps (these steps are specific to Internet Explorer but are similar for other browsers): 1. 2. 3. 4. Select Tools > Internet Options. Click the Connections tab. Select Never dial a connection. Click OK.
The Router does not have a coaxial port for the cable connection. The Router does not replace your modem. You still need your cable modem in order to use the Router. Connect your cable connection to the cable modem, insert the setup CD into your computer, and then follow the onscreen instructions. The computer cannot connect wirelessly to the network. Make sure the wireless network name or SSID is the same on both the computer and the Router. If you have enabled wireless security, then make sure the same security method and key are used by both the computer and the Router. You need to modify the settings on the Router. To access the web-based utility, follow these instructions: 1. Launch the web browser on your computer, and enter the Routers default IP address, 192.168.15.1, in the Address field. Then press Enter.
NOTE: If you place the Router behind a primary
router with the IP address of 192.168.15.1, then the Router will automatically assume a new default IP address, 192.168.16.1. 2. A login screen appears. The first time you open the web-based utility, use the default user name and password, admin. (You can set a new password from the Administration tabs Management screen.) Then click OK. 3. Click the appropriate tab to change the settings.
WEB: If your questions are not addressed here,
refer to the Linksys website, www.linksys.com.

Appendix B

Specifications
Voice Features IP Multicast / IGMP v1, v2, v3/ IGMP Proxy Voice Algorithms G.711 (a-law and -law) G.726 (16/24/32/40 kbps) G.729 AB G.723.1 (6.3 kbps, 5.3 kbps)
Appendix B: Specifications

Model WRP400 * Note: Many specifications are programmable within a defined range or list of options. Please see the SPA ATA Administration Guide for details. The target configuration profile is uploaded to the WRP400 at the time of provisioning. Data Networking MAC Address (IEEE 802.3) IPv4 - Internet Protocol v4 (RFC 791) Upgradeable to v6 (RFC 1883) ARP - Address Resolution Protocol DNS - A Record (RFC 1706), SRV Record (RFC 2782) DHCP Client - Dynamic Host Configuration Protocol (RFC 2131) DHCP Server - Dynamic Host Configuration Protocol (RFC 2131) PPPoE Client - Point to Point Protocol over Ethernet (RFC 2516) ICMP - Internet Control Message Protocol (RFC792) TCP - Transmission Control Protocol (RFC793) UDP - User Datagram Protocol (RFC768) RTP - Real Time Protocol (RFC 1889) (RFC 1890) RTCP - Real Time Control Protocol (RFC 1889) TFTP RTSP HTTP NAT (RFC 1631) Reverse NAT SDP SNTP - Simple Network Time Protocol (RFC 2030) Type of Service - TOS (RFC 791/1349) QoS - Packet Prioritization by Type Router or Bridge Mode of Operation MAC Address Cloning Port Forwarding
Provisioning, Administration, & Maintenance
Call Forwarding: No Answer/Busy/Unconditional Support for Two Simultaneous Calls SIP TLS (Transport Layer Security) Call Transfer Call Waiting/Hold/Retrieve Three-way Conferencing Call ID Number & Name (Primary Line & On Call Waiting) Call-ID Block (Prevent Send out the Caller ID) Anonymous Call Blocking Distinctive Ringing Do not Disturb Setting Repeat Dialing on Busy Call Return Emergency Call Support Dial Plan Speed Dial Auto-Attendant Multi-Room Meet-Me Conference In-Band/ SIP-INFO DTMF Translation
Web Browser Administration & Configuration via Integral Web Server Telephone Key Pad Configuration with Interactive Voice Prompts Automated Provisioning & Upgrade via HTTP, TFTP, HTTPS Asynchronous Notification of Upgrade Availability via NOTIFY Non-Intrusive, In-Service Upgrades Report Generation & Event Logging Stats in BYE Message Syslog & Debug Server Records Per Line and Purpose Configurable Syslog and Debug Options
Indicator Lights/ LEDs Documentation
Physical Interfaces 4 100Base-T RJ-45 Ethernet Port (IEEE 802.3) Buttons Subscriber Line Interface Circuit (SLIC) 2 RJ-11 FXS Phone Ports - For Analog Circuit Telephone Device USB 2.0 (reserved for future use via firmware upgrade) Reset, WPS

Appendix D

Regulatory Information
Appendix D: Regulatory Information

FCC Statement

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This product has been tested and complies with the specifications for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used according to the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which is found by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
Do not use this product near water, for example, in a wet basement or near a swimming pool. Avoid using this product during an electrical storm. There may be a remote risk of electric shock from lightning. WARNING: This product contains lead, known to the State of California to cause cancer, and birth defects or other reproductive harm. Wash hands after handling.
WARNING: This equipment will be inoperable when main power fails.
WARNING: Many Internet phone service providers do not support calls to emergency service numbers (000 in Australia or 111 in New Zealand). An alternative phone should be used to make emergency calls.
Reorient or relocate the receiving antenna Increase the separation between the equipment or devices Connect the equipment to an outlet other than the receivers Consult a dealer or an experienced radio/TV technician for assistance
WARNING: To ensure compliance with explosure limits to radiofrequency fields, the antenna of the WRP400 should be no closer than 20 cm from the body during use.
Industry Canada Statement
This Class B digital apparatus complies with Canadian ICES-003 and RSS210. Operation is subject to the following two conditions: 1. This device may not cause interference and 2. This device must accept any interference, including interference that may cause undesired operation of the device. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the EIRP is not more than required for successful communication.

Overview of Regulatory Requirements for Wireless LANs
The following standards were applied during the assessment of the product against the requirements of the Directive 1999/5/EC:
Radio: EN and/or EN as applicable EMC: EN 301 489-1, EN 301 489-17 Safety: EN 60950 and either EN 50385 or EN 50371
Dynamic Frequency Selection (DFS) and Transmit Power Control (TPC) are required for operation in the 5 GHz band. DFS: The equipment meets the DFS requirements as defined in ETSI EN 301 893. This feature is required by the regulations to avoid interference with Radio Location Services (radars). TPC: For operation in the 5 GHz band, the maximum power level is 3 dB or more below the applicable limit. As such, TPC is not required.

CE Marking

For the Linksys Wireless-N, -G, -B, and/or -A products, the following CE mark, notified body number (where applicable), and class 2 identifier are added to the equipment.

Frequency Band (MHz)

2400-2483.5
Max Power Level (EIRP) (mW)

Indoor ONLY

Indoor & Outdoor
Check the CE label on the product to find out which notified body was involved during the assessment.

5150-5350 5470-5725

Dynamic Frequency Selection and Transmit Power Control are
required in the frequency ranges of 5250-5350 MHz and 5470-5725 MHz.
The following countries have restrictions and/or requirements in addition to those given in the table labeled Overview of Regulatory Requirements for Wireless LANs:

Denmark

In Denmark, the band 5150 - 5350 MHz is also allowed for outdoor usage. I Danmark m frekvensbndet 5150 - 5350 ogs anvendes udendrs.
Wireless-G Broadband Router with 2 Phone Ports 43
Product Usage Restrictions
This product is designed for indoor usage only. Outdoor usage is not recommended, unless otherwise noted.

France

For 2,4 GHz, the product should not be used outdoors in the band 2454 - 2483,5 MHz. There are no restrictions when used in other parts of the 2,4 GHz band when used indoors. Check http://www.arcep.fr/ for more details. Pour la bande 2,4 GHz, l quipement ne doit pas tre utilis en extrieur dans la bande 2454 - 2483,5 MHz. Il ny a pas de restrictions pour des utilisations en intrieur dans dautres parties de la bande 2,4GHz. Consultez http://www.arcep.fr/ pour de plus amples dtails.
Applicable Power Levels in France

2,4 GHz Restrictions

This product is designed for use with the standard, integral or dedicated (external) antenna(s) that is/are shipped together with the equipment. However, some applications may require the antenna(s), if removable, to be separated from the product and installed remotely from the device by using extension cables. For these applications, Linksys offers an RSMA extension cable (AC9SMA) and an R-TNC extension cable (AC9TNC). Both of these cables are 9 meters long and have a cable loss (attenuation) of 5 dB. To compensate for the attenuation, Linksys also offers higher gain antennas, the HGA7S (with R-SMA connector) and HGA7T (with R-TNC connector). These antennas have a gain of 7 dBi and may only be used with either the R-SMA or R-TNC extension cable. Combinations of extension cables and antennas resulting in a radiated power level exceeding 100 mW EIRP are illegal.

USER GUIDE

Cisco Small Business
WRP400 Wireless-G Broadband Router with 2 Phone Ports
2009 Cisco Systems, Inc. All rights reserved.

OL-18475-01

Contents
Chapter 1: Getting to Know the WRP400
Front Panel Back Panel Side Panel Placement Positions
Chapter 2: Before You Begin: Understanding Wireless Security
Change the Default Wireless Network Name or SSID Change the Default Router Password Enable MAC Address Filtering for Wireless Access Enable Encryption General Network Security Guidelines Additional Security Tips
Chapter 3: Using the Web-Based Utility for Advanced Configuration
How to Access the Web-Based Utility
Chapter 4: Basic Settings

Setup > Basic Setup

Internet Setup Network Setup Time Setting

Setup > DDNS

DynDNS.org TZO.com
Setup > MAC Address Clone Setup > Advanced Routing
Advanced Settings: PPPoE Relay Advanced Routing

Cisco WRP400 User Guide

Chapter 5: Installing and Configuring Your Mobile Network
Installing Your USB Modem Setup > Mobile Network Setup > Connection Recovery
Recovery & Failover WAN Interfaces
Understanding the LED Behavior for Mobile Network
LED Behavior During USB Modem Installation LED Behavior During Mobile Network Connectivity
Chapter 6: Configuring Your Wireless Network
Wireless > Basic Wireless Settings
Manual Configuration of the Network Wi-Fi Protected Setup
Wireless > Wireless Security
WEP WPA Personal WPA2 Personal WPA Enterprise WPA2 Enterprise
Wireless > Wireless MAC Filter Wireless > Advanced Wireless Settings
Chapter 7: Configuring Network Security and Controlling Internet Access

Security > Firewall

Firewall Internet Filter Web Filter
Security > VPN Passthrough Access Restrictions > Internet Access
Creating or Modifying an Internet Access Policy
Chapter 8: Configuring Applications and Gaming
Applications and Gaming > Single Port Forwarding Applications and Gaming > Port Range Forward Applications & Gaming > Port Range Triggering Applications and Gaming > DMZ Applications and Gaming > QoS
Chapter 9: Administration
Administration > Management

Management IGMP

Administration > Log Administration > Diagnostics
Ping Test Traceroute Test
Administration > Factory Defaults Administration > Firmware Upgrade
Username & Password Firmware Upgrade
Administration > Config Management
Backup Configuration Restore Configuration

100 100

Administration > Reboot
Chapter 10: Using the Status Screens

Status > Router

Router Information Internet Connection

102 103

Status > Mobile Network
Mobile Network Status Data Card Status

104 105

Status > Local Network
Local Network DHCP Server

106 106

Status > Wireless Network
Chapter 11: Configuring Voice Services
Access to the Voice Screens Voice > Info
Product Information System Status Line 1/2 Status

109 110

Voice > System
System Configuration Miscellaneous Settings

114 114

Voice > User 1/2
Call Forward Settings Selective Call Forward Settings Speed Dial Settings Supplementary Service Settings Distinctive Ring Settings Ring Settings

117 117

Voice > Admin Login
Chapter 12: Interactive Voice Response Menu

Overview Menu Commands

119 119
Appendix A:Troubleshooting
General Troubleshooting Mobile Network Troubleshooting

121 125

Appendix B:Specifications Appendix C:Regulatory Information Appendix D:Where to Go From Here

Preface

Finding Information in PDF Files
The WRP400 documents are published as PDF files. The PDF Find/Search tool within Adobe Reader lets you find information quickly and easily online. You can perform the following tasks: Search an individual PDF file. Search multiple PDF files at once (for example, all PDFs in a specific folder or disk drive). Perform advanced searches.

Finding Text in a PDF

Follow this procedure to find text in a PDF file.

Power: The Power LED shines green and stays on while the WRP400 is powered on. If the LED shines red, verify that the correct power adapter is used. If the LED remains red, contact your service provider for support. Self-diagnostic test: During boot-up, the LED flashes green to indicate that the self-diagnostic test is in progress. When the test is complete, the LED shines steady green. Initialization of a USB modem: When you connect a device to the USB port, the Power LED flashes green and orange, indicating that initialization is in progress. After the device initializes, the Power LED shines steady green. If the device fails to initialize, the LED continues to flash green and orange.

Description

Mobile network connection: If a USB modem is installed, the mobile network connection is used as a failover when an Ethernet connection is unavailable. The Power LED shows the status of the mobile network:
Flashing Orange: The WRP400 is attempting to connect to the Internet through the mobile network connection. Steady Orange: The WRP400 is connected to the Internet through the mobile network connection. Continuous Flashing Orange: The WRP400 failed to connect to the Internet through the mobile network connection and is trying again. Steady Green: If a USB device is connected, this LED behavior indicates that the device was successfully initialized and that the WRP400 is not using the mobile network connection. If the USB device is removed, this LED behavior indicates that theWRP400 has power.
Phone 1-2 (Green): The Phone 1 or 2 LED lights up and stays on when an active line is registered to the corresponding port on the back panel. The LED slowly flashes when voicemail messages are waiting. Wireless (Green): The Wireless LED lights up when the wireless feature is enabled. It flashes when the WRP400 is actively sending or receiving data over the network. Ethernet 1-4 (Green): These numbered LEDs, corresponding with the numbered ports on the back panel, serve two purposes. If the LED is solidly lit, the WRP400 is connected to a device through that port. It flashes to indicate network activity over that port. Internet (Green): The Internet LED lights up and stays on when an Internet connection is made through the Internet port. It flashes to indicate network activity over the Internet port. NOTE: The Power LED indicates Internet connectivity through the mobile network connection. See the information for the Power LED in this table.

NOTE The Setup Wizard guides you through the process of completing the tasks that are
described below. You are strongly encouraged to use the Setup Wizard for initial configuration of the WRP400.
Change the Default Wireless Network Name or SSID
Wireless devices have a default wireless network name or Service Set Identifier (SSID) set by the factory. This is the name of your wireless network, and can be up to 32 characters in length. To distinguish your wireless network from other wireless networks that may exist around you, you should change the default wireless network name to something easily recognizable, but do not use personal information (such as your Social Security number) because this information may be available for anyone to see when browsing for wireless networks. For more information, see Wireless > Basic Wireless Settings, on page 51.
Change the Default Router Password
When you connect to the administration web server, you will be asked for a password. The WRP400 has a default password set by the factory. The default password is admin. Hackers know the defaults and may try to use them to access your wireless device and change your network settings. To prevent unauthorized access, change the password to one that is hard to guess. For more information, see Administration > Management, on page 88.
Enable MAC Address Filtering for Wireless Access
The Cisco WRP400 gives you the ability to enable Media Access Control (MAC) address filtering. The MAC address is a unique series of numbers and letters assigned to every networking device. With MAC address filtering enabled, wireless network access is provided solely for wireless devices with specific MAC addresses. For example, you can specify the MAC address of each computer in your home so that only those computers can access your wireless network. For more information, see Wireless > Wireless MAC Filter, on page 62.

Enable Encryption

Encryption protects data transmitted over a wireless network. Wi-Fi Protected Access (WPA/WPA2) and Wired Equivalency Privacy (WEP) offer different levels of security for wireless communication. A network encrypted with WPA/WPA2 is more secure than a network encrypted with WEP, because WPA/WPA2 uses dynamic key encryption. To protect the information as it passes over the airwaves, you should enable the highest level of encryption supported by your network equipment. WEP is an older encryption standard and may be the only option available on some older devices that do not support WPA. For more information, see Wireless > Wireless Security, on page 56.

General Network Security Guidelines
Wireless network security is effective only when combined with good network security practices. Password protect all computers on the network and individually password protect sensitive files. Change passwords on a regular basis. Install anti-virus software and personal firewall software. Disable file sharing (peer-to-peer). Some applications may open file sharing without your consent and/or knowledge.

Additional Security Tips

To help prevent security problems, follow these guidelines: Keep wireless routers, access points, or gateways away from exterior walls and windows. Turn wireless routers, access points, or gateways off when they are not being used (at night, during vacations). Use strong passphrases that are at least eight characters in length. Combine letters and numbers to avoid using standard words that can be found in the dictionary.
Using the Web-Based Utility for Advanced Configuration
After you set up the WRP400 with the Setup Wizard (located on the CD-ROM), the router will be ready for use. However, if youd like to change its advanced settings, use the web-based utility. This chapter describes each web page of the utility and each pages key functions. You can access the utility via a web browser on a computer connected to the router. The web-based utility has these main tabs: Setup, Wireless, Security, Access Restrictions, Applications & Gaming, Administration, Status, and Voice. Additional tabs will be available after you click one of the main tabs.
NOTE When first installing the WRP400, you should use the Setup Wizard on the Setup
CD-ROM. If you want to configure advanced settings, use this chapter to learn about the web-based utility. The web-based utility has the following main tabs: Setup: On the Setup screens, you can configure general settings, such as Internet connection, IP address, DHCP server settings, DDNS, time settings, and advanced router settings. For more information, see Chapter 4, Basic Settings. Mobile Network: You can connect a compatible Mobile Broadband USB modem to the USB port of the WRP400 and configure the mobile network connection.For more information, see Chapter 5, Installing and Configuring Your Mobile Network. Wireless: You can use the Wireless screens to set up and secure your wireless network.For more information, see Chapter 6, Configuring Your Wireless Network. Security and Access Restrictions: You can use the Security screens to enable a firewall, add filters, or allow VPN tunnels. You can use the Access Restrictions screen to control Internet usage.For more information, see

Point-to-Point Tunneling Protocol (PPTP) is a service that applies to connections in Europe only. Figure 8 Setup > Basic Setup > Internet Connection Type > PPTP
Enter the information that was provided by your service provider, and select the Connect On Demand or Keep Alive feature, if desired. Internet IP Address: The IP address of your WRP400, as seen from the Internet. Subnet Mask: The subnet mask, as seen by users on the Internet (including your service provider). Default Gateway: The IP address of your service provider server. User Name and Password: The login information for your account. Connect on Demand: Max Idle Time: A feature that allows your WRP400 to re-establish a terminated connection when a user attempts to access the Internet. To enable this feature, select Connect on Demand. Use the Max Idle Time field to specify the period of inactivity that causes a connection to terminate. Keep the default Max Idle Time of 5 minutes, or specify the maximum period of inactivity that you want to allow. Keep Alive: Redial Period: A feature that allows your WRP400 to check your Internet connection at a specified interval (Redial Period). If you are disconnected, then the WRP400 automatically re-establishes your connection. To enable this option, select Keep Alive. Keep the default Redial Period of 30 seconds, or specify the interval at which you want the WRP400 to check the Internet connection.
L2TP is a service that applies to connections in Europe and Israel. Figure 9 Setup > Basic Setup > Internet Connection Type > L2TP
Enter the information that was provided by your service provider, and select the Connect On Demand or Keep Alive feature, if desired. Server IP Address: The IP address of the L2TP Server. User Name and Password: The login information for your account. Connect on Demand: Max Idle Time: A feature that allows your WRP400 to re-establish a terminated connection when a user attempts to access the Internet. To enable this feature, select Connect on Demand. Use the Max Idle Time field to specify the period of inactivity that causes a connection to terminate. Keep the default Max Idle Time of 5 minutes, or specify the maximum period of inactivity that you want to allow. Keep Alive: Redial Period: A feature that allows your WRP400 to check your Internet connection at a specified interval (Redial Period). If you are disconnected, then the WRP400 automatically re-establishes your connection. To enable this option, select Keep Alive. Keep the default Redial Period of 30 seconds, or specify the interval at which you want the WRP400 to check the Internet connection.

Telstra Cable

Telstra Cable is a service used in Australia only. Figure 10 Setup > Basic Setup > Internet Connection Type > Telstra Cable
Enter the information that was provided by your service provider, and select the Connect On Demand or Keep Alive feature, if desired. Heart Beat Server: The IP address of the Heart Beat Server. User Name and Password: The login information for your account. Connect on Demand: Max Idle Time: A feature that allows your WRP400 to re-establish a terminated connection when a user attempts to access the Internet. To enable this feature, select Connect on Demand. Use the Max Idle Time field to specify the period of inactivity that causes a connection to terminate. Keep the default Max Idle Time of 5 minutes, or specify the maximum period of inactivity that you want to allow. Keep Alive: Redial Period: A feature that allows your WRP400 to check your Internet connection at a specified interval (Redial Period). If you are disconnected, then the WRP400 automatically re-establishes your connection. To enable this option, select Keep Alive. Keep the default Redial Period of 30 seconds, or specify the interval at which you want the WRP400 to check the Internet connection.

Optional Settings

Some of these settings may be required by your service provider. Verify with your service provider before making any changes. Figure 11 Setup > Basic Setup > Optional Settings
Host Name and Domain Name: A host and domain name for the WRP400. Some service providers, usually cable service providers, require these names as identification. In most cases, leaving these fields blank will work. MTU: MTU is the Maximum Transmission Unit. The largest packet size that is permitted for Internet transmission. Select Manual if you want to manually enter the largest packet size that is transmitted. To have the WRP400 select the best MTU for your Internet connection, keep the default setting, Auto. Size: When Manual is selected in the MTU field, this option is enabled. Leave this value in the 576 to 1500 range. The default size depends on the Internet Connection Type: DHCP or Static IP: 1500 PPPoE: 1492 PPTP or L2TP: 460 Telstra Cable: 1500
Static DNS 1-3: The Domain Name System (DNS) is how the Internet translates domain or website names into Internet addresses or URLs. Enter the IP address of the DNS server, which is provided by your service provider. If you wish to use a different DNS server, enter its IP address in one of these fields. You can enter up to three DNS server IP addresses here. The WRP400 will use these for quicker access to functioning DNS servers. By default, the WRP400 uses 192.168.15.1 for DNS.

Network Setup

Setup > Connection Recovery
An Internet connection can be established via the Ethernet Internet port or a USB modem connected to the USB port. While both Ethernet and USB interfaces may be connected, only one of them can be used to establish a link at a time. By default, the WRP400 uses the Ethernet Internet connection when available. If the Ethernet Internet connection fails, the WRP400 automatically attempts to bring up another connection on another interface. This feature is called failover. Whenever the Ethernet Internet connection recovers, the WRP400 automatically attempts to bring back and recover the Ethernet Internet connection. This feature is called Recovery.

Figure 22

Recovery & Failover
Ethernet Connection Recovery: This feature ensures that your Internet connection is made through the Ethernet interface if it is available. Enabling this feature also enables the Interface Connection Failover, which ensures that if the Internet connection fails on the Ethernet interface, the WRP400 automatically attempts to bring up the connection through the mobile network if available. Whenever the Ethernet Internet connection recovers, the WRP400 automatically attempts to bring back and recover the Ethernet Internet connection.
NOTE Ethernet Connection Recovery requires that your Mobile Connection
Mode is set to Auto and your Ethernet interface is set to the high priority. When you enable this feature, a message appears. Click OK to confirm that you want to change the Mobile Connection Mode and the Ethernet interface priority.
Interface Connection Failover: Failover detection works by detecting the physical connection and/or presence of traffic on the Internet link. If the link is idle for some time, the WRP400 will attempt to ping a destination. If the ping does not reply, the WRP400 assumes the link is down and attempts to fail over to another interface. Click Enabled if you want to use this feature, or otherwise click Disabled. This feature is automatically enabled if you enable Ethernet Connection Recovery. Timeout: Specify the time interval at which the WRP400 detects the status of the Internet connection. The default timeout interval is 60 seconds. Failover Validation Site: A ping target for the WRP400 to use to detect the status of the Internet connection. By default the WRP400 pings the Network Time Protocol (NTP) servers. You may specify a different IP address as a target here.

Wireless access can be filtered by using the MAC addresses of the wireless devices within your networks radius.
Figure 31 Wireless > Wireless MAC Filter
Select a SSID: Select the SSID that you want to configure.
NOTE If you enabled the second wireless network on the Basic Wireless
Settings screen, then you can set up wireless MAC filtering for each SSID.
Wireless MAC Filter: To filter wireless users by MAC address, select Enabled If you do not wish to filter users by MAC address, keep the default setting, Disabled.

Access Restriction

In this section, you choose how to use the MAC Address Filter List: to prevent access or to permit access. Prevent: Select this option to block wireless access to devices with the specified MAC addresses. This button is selected by default. Permit: Select this to allow wireless access by devices with the specified MAC addresses.

MAC Address Filter List

In this section, you identify the clients to filter. You can choose clients from the Wireless Client List, or you can enter the MAC addresses individually. Wireless Client List: Click this button if you want to choose the clients from the Wireless Client List screen. See Wireless Client List. below. MAC 01-40: Enter the MAC addresses of the devices whose wireless access you want to block or allow.

Wireless Client List

Check the Save to MAC Address Filter List check box to select a device. Then click Add to add the device to the MAC Address Filter List. To retrieve the most up-to-date information, click Refresh. To exit this screen and return to the Wireless MAC Filter screen, click Close.
Wireless > Advanced Wireless Settings

Figure 32

The Advanced Wireless Settings screen is used to set up the advanced wireless functions of the WRP400. These settings should only be adjusted by an expert administrator as incorrect settings can reduce wireless performance.
Figure 33 Wireless > Advanced Wireless Settings
Authentication Type: The default is set to Auto, which allows either Open System or Shared Key authentication to be used. With Open System authentication, the sender and the recipient do not use a WEP key for authentication. With Shared Key authentication, the sender and recipient use a WEP key for authentication. Select Shared Key to only use Shared Key authentication. Transmission Rate: The rate of data transmission should be set depending on the speed of your wireless network(s). You can select from a range of transmission speeds, or you can select Auto to have the WRP400 automatically use the fastest possible data rate and enable the AutoFallback feature. Auto-Fallback will negotiate the best possible connection speed between the WRP400 and a wireless client. The default is Auto. CTS Protection Mode: The WRP400 will automatically use CTS (Clear-ToSend) Protection Mode when your Wireless-G products are experiencing severe problems and are not able to transmit to the WRP400 in an environment with heavy 802.11b traffic. This function boosts the ability of the WRP400 to catch all Wireless-G transmissions but will severely decrease performance. The default is Auto. Beacon Interval: Enter a value between 1 and 65,535 milliseconds. The Beacon Interval value indicates the frequency interval of the beacon. A beacon is a packet broadcast by the WRP400 to synchronize the wireless network(s). The default value is 100. DTIM Interval: This value, between 1 and 255, indicates the interval of the Delivery Traffic Indication Message (DTIM). A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages. When the WRP400 has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a DTIM Interval value. Its clients hear the beacons and awaken to receive the broadcast and multicast messages. The default value is 1. RTS Threshold: If you encounter inconsistent data flow, only minor reduction of the default value, 2347, is recommended. If a network packet is smaller than the preset RTS threshold size, the RTS/CTS mechanism will not be enabled. The WRP400 sends Request to Send (RTS) frames to a particular receiving station and negotiates the sending of a data frame. After receiving an RTS, the wireless station responds with a Clear to Send (CTS) frame to acknowledge the right to begin transmission. The RTS Threshold value should remain at its default value of 2347.

You can use the Internet Access Policy screen to block or allow specific kinds of Internet usage and traffic, such as Internet access, designated services, and websites during specific days and times.

Figure 36

Access Policy: Select a policy from the drop-down list to display that policys settings. You can then enter or modify the settings. Be sure to save your changes before selecting another policy from the drop-down list.
Delete This Entry: To delete an access policy, select the policys number from the Access Policy list, and then click this button. Summary: To view all policies, click this button. The Summary appears in a separate window. The policies are listed with the following information: No. (number), Policy Name, Access, Days, Time of Day, and status (Enabled). To enable a policy, check Enabled. To delete a policy, click Delete. Click Save Settings to save your changes, or click Cancel Changes to cancel your changes. To return to the Internet Access Policy screen, click Close.
Enter Policy Name: Enter a name for the policy that you selected in the Access Policy list. Status: Policies are disabled by default. To enable the selected policy, select Enabled.
Applied PCs: Click Edit List to select the computers that will be affected by the policy that you selected in the Access Policy list. The List of PCs window appears.
Choose the PCs that will be affected by this policy: MAC Address: Enter a MAC address that you want to add to the list. IP Address: Enter the final octet of an IP address that you want to add to the list. IP Address Range: Enter the final octet of an IP address in the first box, and then enter the final octet of another IP address in the second box, to create a range of IP addresses to add to the list.
Click Save Settings to save your changes, or click Cancel Changes to cancel your changes. To return to the Internet Access Policy screen, click Close. Access Restriction: Select the appropriate option, Deny or Allow, depending on whether you want to block or allow Internet access for the computers that are listed on the List of PCs screen.

Applications and Gaming > QoS
Destination: If you want to specify the DMZ host by IP address, select IP Address and enter the IP address in the field provided. If you want to specify the DMZ host by MAC address, select MAC Address and enter the MAC address in the field provided. DHCP Client Table: Click this button to view a list of DHCP clients. See DHCP Client Table. This button becomes available when you select the MAC Address option.

DHCP Client Table

The DHCP Client Table lists computers and other devices that have been assigned IP addresses by the WRP400. The list can be sorted by Client Name, IP Address, and MAC Address. To select a DHCP client, click Select. To retrieve the most upto-date information, click Refresh. To exit this screen and return to the DMZ screen, click Close.
Quality of Service (QoS) ensures better service to high-priority types of network traffic, which may involve demanding, real-time applications, such as videoconferencing.
NOTE Click Save Settings to apply your changes, or click Cancel Changes to cancel your

changes.

Figure 41 Applications and Gaming > QoS

Wireless

WMM Support: If you have other devices that support Wi-Fi Multimedia (WMM) on your network, select Enabled. Otherwise, keep the default, Disabled. No Acknowledgement: To prevent the WRP400 from resending data if an error occurs, select Enabled. Otherwise, keep the default, Disabled.

Internet Access Priority

In this section, you can set the bandwidth priority for a variety of applications and devices. There are four levels priority: High, Medium, Normal, or Low. When you set priority, do not set all applications to High, because this will defeat the purpose of allocating the available bandwidth. If you want to select below normal bandwidth, select Low. Depending on the application, a few attempts may be needed to set the appropriate bandwidth priority. Enabled/Disabled: To use the QoS policies you have set, keep the default, Enabled. Otherwise, select Disabled. Upstream Bandwidth: To allow the WRP400 to control the maximum bandwidth for upstream data transmissions, keep the default, Auto. To manually set the maximum, select Manual, and enter the appropriate number in the field provided.

The Wireless Network screen displays information about your wireless network(s). Figure 58 Status > Wireless Network
Channel: The channel of the wireless network(s) is displayed. Mode: The wireless mode is displayed.
Status information for each wireless network is displayed. Wireless MAC Address: The wireless MAC address of the local, wireless interface is displayed. Network Name (SSID): The network name, which is also called the SSID, is displayed. Security: The wireless security method is displayed. SSID Broadcast: The status of the SSID Broadcast feature is displayed.
Configuring Voice Services
You can use the Voice screens to manage the voice gateway features of the WRP400. How Do I. View the Voice screens? See Access to the Voice Screens, on page 109 View product information, system status, and line status? See Voice > Info, on page 110 Change the password for user access to the Voice screens? See Voice > System, on page 113 Set call forwarding, speed dial, supplementary services, and ring settings? See Voice > User 1/2, on page 114 Configure the Admin login? See Voice > Admin Login, on page 118
Access to the Voice Screens
There are two level of access, user and Admin Login. When you click the Voice tab, the Info screen is automatically displayed. If you set a User Password on the System screen, then you will be asked to enter it before the Info screen is displayed. The Admin Login allows access to more advanced settings. To access administrative screens, click Admin Login, and enter the user name and password provided by your service provider. Contact your service provider for more information. (The factory default Admin Login name and password are admin.)

Voice > Info

NOTE In most cases, you do not need to use the administrative screens. Contact your
service provider for more information.
The Info screen displays Voice over Internet Protocol (VoIP) information about the WRP400. Figure 59 Voice > Info
Product Name: The model number of the WRP400 Serial Number: The serial number of the WRP400 Software Version: The version number of the WRP400 software Hardware Version: The version number of the WRP400 hardware MAC Address: The MAC address of the WRP400 Client Certificate: The status of the client certificate, which indicates that the WRP400 has been authorized by your service provider,

FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 25 cm between the radiator and your body. This device has been tested and passed co-located EMC / RF exposure test with the following three 3G cards, as described in this filing. Other 3G cards with substantially similar physical dimensions, construction, and electrical and RF characteristics may or may not comply with FCC rule, please consult manufacture before purchase.

Item 3

Brand Name Sierra Wireless, Inc. Novatel Wireless, Inc. Novatel Wireless, Inc.
Model Name AirCard 595U U720 U727
FCC ID N7N-MC5725U PKRNVWMCD3000 PKRNVWMCD727
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. IEEE 802.11b or 802.11g operation of this product in the USA is firmware-limited to channels 1 through 11.
Safety Notices and Information
CAUTION: To reduce the risk of fire, use only No.26 AWG or larger telecommunication line cord. Do not use this product near water, for example, in a wet basement or near a swimming pool. Avoid using this product during an electrical storm. There may be a remote risk of electric shock from lightning.
WARNING: This product contains lead, known to the State of California to cause cancer, and birth defects or other reproductive harm. Wash hands after handling.
WARNING: This equipment will be inoperable when main power fails.
WARNING: Many Internet phone service providers do not support calls to emergency service numbers (000 in Australia or 111 in New Zealand). An alternative phone should be used to make emergency calls.
WARNING: To ensure compliance with explosure limits to radiofrequency fields, the antenna of the WRP400 should be no closer than 20 cm from the body during use.
Industry Canada Statement
This device complies with Industry Canada ICES-003 rule. Operation is subject to the following two conditions: 1. This device may not cause interference and 2. This device must accept any interference, including interference that may cause undesired operation of the device.
Industry Canada Radiation Exposure Statement
This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 25 cm between the radiator & your body. This device has been tested and passed co-located EMC / RF exposure test with the following three 3G cards, as described in this filing. Other 3G cards with substantially similar physical dimensions, construction, and electrical and RF characteristics may or may not comply with FCC rule, please consult manufacture before purchase.

Table 2 Applicable Power Levels in France Frequency Range (MHz)

2400-2483.5

Location Indoor (No restrictions) Outdoor

Power (EIRP)

100 mW (20 dBm)

2400-2454 2454-2483.5

100 mW (20 dBm) 10 mW (10 dBm)
This product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy. Unless this 2,4-GHz wireless LAN product is operating within the boundaries of the owners property, its use requires a general authorization. Please check http://www.comunicazioni.it/it/ for more details. Questo prodotto conforme alla specifiche di Interfaccia Radio Nazionali e rispetta il Piano Nazionale di ripartizione delle frequenze in Italia. Se non viene installato allinterno del proprio fondo, lutilizzo di prodotti Wireless LAN a 2,4 GHz richiede una Autorizzazione Generale. Consultare http://www.comunicazioni.it/it/ per maggiori dettagli.

Latvia

The outdoor usage of the 2,4 GHz band requires an authorization from the Electronic Communications Office. Please check http://www.esd.lv for more details.
2,4 GHz frekveu joslas izmantoanai rpus telpm nepiecieama atauja no Elektronisko sakaru direkcijas. Vairk informcijas: http://www.esd.lv.
Notes: 1. Although Norway, Switzerland and Liechtenstein are not EU member states, the EU Directive 1999/5/EC has also been implemented in those countries. 2. The regulatory limits for maximum output power are specified in EIRP. The EIRP level of a device can be calculated by adding the gain of the antenna used (specified in dBi) to the output power available at the connector (specified in dBm).
This product is designed for indoor usage only. Outdoor usage is not recommended, unless otherwise noted.
Product Usage Restrictions

2,4 GHz Restrictions

This product is designed for use with the standard, integral or dedicated (external) antenna(s) that is/are shipped together with the equipment. However, some applications may require the antenna(s), if removable, to be separated from the product and installed remotely from the device by using extension cables. For these applications, Cisco offers an R-SMA extension cable (AC9SMA) and an RTNC extension cable (AC9TNC). Both of these cables are 9 meters long and have a cable loss (attenuation) of 5 dB. To compensate for the attenuation, Cisco also offers higher gain antennas, the HGA7S (with R-SMA connector) and HGA7T (with R-TNC connector). These antennas have a gain of 7 dBi and may only be used with either the R-SMA or R-TNC extension cable. Combinations of extension cables and antennas resulting in a radiated power level exceeding 100 mW EIRP are illegal.